ColdFusion

Hi,We have a requirement to switch datasources in our application. A cloud app we are developing has a primary and secondary server and it will tell us when the primary is offline and it can call a end-point (.cfm) on our server. If this script updated our neo-datasources.xml on-the-fly with the new datasource information, would this change the DSN reliably? Would it require a server restart? Does it sound viable?I suppose we could also put some code in application.cfc to check the database, but this means we have to change the DSN back again at some time in the future when the DSN for the primary starts working again, so perhaps some scheduled task etc? All sounds a bit too convoluted.We could put a test in our .cfm code to see if the primary database was offline, but that's more code and it has to be in every request, which sounds a bad idea.Any ideas appreciated.Thanks,Mark

I have installed ColdFusion 2021 on a Windows 2012 R2 Server.  When I pull up the ColdFusion Administrator in Internet Explorer (I know, unsupported), there are no links to the subcategories nor are there any icons/buttons in the top right for Information or Logout.  I also tried in Chrome, I get the same problem. I have attached a screenshot that shows what the display is showing.  Note the missing links along the top of the white area, and the missing images and icons in the top black area. I have tried making several adjustments to the browser settings, but no luck. I have also installed the same software on another Windows 2012 R2 Server and do not have the same problems.  Everything is working as expected. Any help or suggestions are greatly appreciated. -Nancy

Hi,I have a legacy API that uses taffy and CF 2018, and I'm posting json with Content-Type: application/json to the API.taffy checks for binary data it gets from getHTTPRequestData().content.  The documentation for getHTTPRequestData says that binary data will be returned if the content type doesn't start with 'text' or if it is "application/x-www-form-urlencoded."   I have confirmed that the data are being posted with Content-Type: application/json, but getHTTPRequestData().content is returning a string.  If I cfdump the string, I see the following which appears to contain a representation of the bytes: {"Code":"\u16a0\u16c7\u16bb\u16eb\u16d2\u16e6\u16a6\u16eb\u16a0\u16b1\u16a9\u16a0\u16a2\u16b1\u16eb\u16a0","CodeID":"515","CodeDescription":"foo"} The Code in the JSON was a test string with ᚠᛇᚻ᛫ᛒᛦᚦ᛫ᚠᚱᚩᚠᚢᚱ᛫ᚠ.Would anyone have any ideas how data might be getting garbled before it gets to the taffy CF application.cfc (which extends the taffy.core.a

 I wanted to reinstall my personal CF server but I have this message:Connection verification failed for data source: H3637zennetjava.sql.SQLException: [Macromedia] [SequeLink JDBC Driver] [ODBC Socket] [Microsoft] [ODBC Microsoft Access Driver] Your application could not start. The workgroup information file is missing or opened exclusively by another user.The root cause was that: java.sql.SQLException: [Macromedia] [SequeLink JDBC Driver] [ODBC Socket] [Microsoft] [Microsoft Access ODBC Driver] Your application could not start. The workgroup information file is missing or opened exclusively by another user.I don't know where it comes from!Thanks for your help.

We are still running CF10 on production servers and was looking for recommendations on companies who could assist with migrating to latest version?  We tried ourselves but couldn't get the sites working.

Hello. We want to improve our legacy CF10 with native Tomcat and I got it working with the latest Tomcat version 9 release a few days ago.. As a challenge, I want to try and make it work with Tomcat 10 but came up with this error ...async.Stockticker@29962b2f') 17-Feb-2021 11:02:48.577 SEVERE [http-nio-8585-exec-1] org.apache.catalina.core.StandardContext.listenerStart Error configuring application listener of class [coldfusion.bootstrap.HttpFlexSessionBootstrap] java.lang.NoClassDefFoundError: javax/servlet/http/HttpSessionBindingListener at java.base/java.lang.ClassLoader.defineClass1(Native Method) at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1016).... where can I start troubleshooting this? Thanks!    

OS: Windows 2016 (Azure VM)Version: Coldfusion 2021Command: call c:\ColdfusionX\cfsetup\cfsetup.bat import all cfinst.json c:\ColdfusionX\cfusion Is anyone else having issues importing the sessionCookieTimeout parameters using CFSETUP IMPORT/EXPORT ALL?It was set to  "-1", but came up as "-60" is the JSON file.   I am assuming it is recording the value in seconds.   CFSETUP failes with any number below zero..  

I took this from Access and have used IS NOT.  I took everything out except for "Wal-mart", Changed to Wal-Mart and 'Wal-mart'.  Nothing works unless I take the entire Where clause out.  Any help would be appreciated. WHERE ShipToName NOT ("Wal-Mart" OR "GCC Belvidere IL") AND FOB ="delivered" AND ShipToID Not ("MAN-002" OR "OXN-001" OR "WAT-001")))

Hi, I am trying to find the hotfix file hf201800-4207395.jar. The Adobe ColdFusion support/download page does not have the hotfixes, and CF support have not answered me. Does anyone have the link and/or the file? Thanks,Mark

Greetings, We are running CF18 enterprise(latest update 10) on Windows server.  Tomcat version 9.0.21.0. Java version 11.0.3.Our security team informed us about following vulnerability after Nessus scan on CF server: Plugin ID: 133845 Port: www (8500/tcp)Plugin Output:  Installed version : 9.0.21  Fixed version     : 9.0.31Plugin Description:The version of Tomcat installed on the remote host is prior to 7.0.100, 8.xprior to 8.5.51, or 9.x prior to 9.0.31. It is, therefore, affected by multiplevulnerabilities.  - An HTTP request smuggling vulnerability exists in Tomcat due to mishandlingTransfer-Encoding headers     behind a reverse proxy. An unauthenticated, remoteattacker can exploit this, via crafted HTTP requests,     to cause unintendedHTTP requests to reach the back-end. (CVE-2019-17569)  - An HTTP request smuggling vulnerability exists in Tomcat due to badend-of-line (EOL) parsing that allowed&nb

We are in the process of upgrading from CF11 to CF2018. We are installing it with jdk 11.0.7. When attempting to reach out to another server through cfhttp, it appears to be rejecting the wildcard cert supplied by the destination server. I/O Exception: Certificate for <ourserver.test.local> doesn't match any of the subject alternative names: [*.test.local] The same certs work fine with CF11, so I'm hoping there is some configuration in CF2018 that I have missed. 

Our CF2018 application handles sessions manually using cookies, but we found that cfid and cftoken params are appearing on the URL in some cases. I expected that these URL params might just be an unwanted side effect of coders forgetting to put addtoken="no" on their cflocation tags, so I coded addtoken="no" on all cflocation tags and that seems to have fixed that issue. My concern is that during my analyis, I found that the Adobe docs say that ClientManagement must be set to true for the addToken param to work (From https://helpx.adobe.com/coldfusion/cfml-reference/coldfusion-tags/tags-j-l/cflocation.html😞 Our application has ClientManagement set to false, and yet the addToken param successfully passes or suppresses the URL params depending on the param value just fine. Why? Is this an error in the docs? I want to avoid any special case gotchas.

We are currently in the process of updating our Servers to Windows 2018. All of our ColdFusion web applications are being tested and re-written to work in ColdFusion 2018 Standard edition. We also are using Sybase databases connected in ColdFusion Adninistration. One of our applications was relying on a COM component generated in PowerBuilder which needed to be dropped and replaced. Its main function was to read entered passwords and encrypt or decrypt them to verify that the stored encrypted password is correct. The Encryption/Decryption was performed by a DLL written in C++ with Export functions. The component was easily declared and usable in PowerBuilder. The function has the form: FUNCTION long Decrypt(string password, string StringToDecrypt, ref string DecryptedString) LIBRARY 'UTIL.DLL" alias for "Decrypt:Ansi". We cannot decompile this 32bit library.We have not been able to declare this dll and function in ColdFusion Using CFOBJECT. Note: This dll is 32bit dynamic dll with no s

Please let me know how to display the query written in cold fusion page on web browser.

Hello, I am hoping someone can help me understand what the underlying issue is here 1: This issue is occurring throughout our domain (www.agcareers.com) and none of the pages (.cfm) are shareable on LinkedIn. But, if I create an HTML page, LinkedIn fetches the metadata of that page not .cfm pages2: URL:- https://www.agcareers.com/test-page-2.cfm On this page, there are two buttons at the top right corner. One with data-url of LinkedIn which works fine. The other button has data-url of our website which does not work The above URL when shared through: https://www.linkedin.com/sharing/share-offsite/?url=www.agcareers.com/test-page-2.cfm is throwing error as well but if I try html version using https://www.linkedin.com/sharing/share-offsite/?url=www.agcareers.com/test-page-2.htm it works fine. LinkedIn Post Inspector fetches metadata of the html page but not .cfm pagehttps://www.linkedin.com/post-inspector/inspect/https:%2F%2Fwww.agcareers.com%2Ftest-page-2.htmhttps://www.l

Hi,I would like to setup a Blue/Green deployment for CF2018.We are currently using IIS+CF on the same VM and in a separate VM we have the MSSQL instance. Image1   We would like to move to this other architecture in order to be able to perform Blue/Green Zero downtime deployments (see below) Solution we want to implement for Blue/Green  According to CF Administrator, Redis external session storage can only be enabled if J2EE sessions are disabled.   We do use J2EE because of the improved security they offer and we are not planning on giving that up. Is there a way to have the session storage to also manage the J2EE sessions?Is there any workaround that I might be missing to be able to implement this solution?How can we keep J2EE sessions replicated in those 2 servers so that we can change traffic requests to one or the other without affecting users? Thanks

I want to download CF2018 (but any link to download Cf2018  takes me to CF2021 download in Adobe site).Can someone please share the download link CF2018. 

Hello,i want to connect from the coldfusion server to an external server with docke.here is the docher mysql server... normally i connect with sequal pro with a tunnel over ssh...but how i can connect the coldfusion servr with the database? Kindly Regards Thorsten

Hello, We have recently update our ColdFusion 2016 install to 2018 on two load balanced RHEL 7.9 servers. Both servers are currently running CF2018 Update 7 with Java version 11.0.10 and we are having issues with making cfhttp calls to various HTTPS sites like Google and Facebook. These cfhttp calls work fine when CF is restarted but we eventually see errors like "I/O Exception: Could not generate secret" , "I/O Exception: Peer not authenticated", and "I/O Exception: Couldn't kickstart handshaking". After updating to Update 7, here's the more prominent error we've seen:  Here are my JVM arguments:-server --add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED --add-opens=java.base/java.nio=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/sun.util.cldr=ALL-UNNAMED --add-opens=java.base/sun.util.locale.provider=ALL-UNNAMED -XX:MaxMetaspaceSize=1024m -XX:+UseParallelGC -Xbatch -Djdk.attach.allowAttachSelf=true -Dcoldfusion.home={application

What was coldfusion replaced with and how do I get a copy of it?

Environment Details:ColdFusion 2021 ReleaseMicrosoft SQLServer 2019Microsoft SQLServer Management Studio Version 18.8Error Message:"Connection verification failed for data source: TESTDBDSNjava.sql.SQLInvalidAuthorizationSpecException: [Macromedia][SQLServer JDBC Driver][SQLServer]Login failed for user 'admin'."Hello,when i add new datasource in coldfusion administration page by selecting Microsoft SQL Server Driver,Im getting above error message.I have entered only Server Name as "DAGEOP", the CF administrator by defalt adding user name as "admin" and some hidden password. Kindly let me know what mistake i have done and how to solve this error.Below are few details about my installation.

I created a fillable form with Adobe. I am using cfpdfform to populate it. I have made no programming changes or changes to the form. Suddenly, it has started filling the form (or the form has started displaying) in landscape mode. You can just see the beginning of the field contents before it disappears upwards. What happened? How do I fix it?

Does anyone have tips on getting clustering wroking across multiple servers in fully patched CF 2016?  Update patch 14 added extra security to the AJP connector in the form of a secret value and it limits what addresses an AJP connector listen on, apparently.  I have two servers in a cluster and I can see from the logs that server WEB01 is trying to connect to server WEB02 but the connections are refused.  specifically the error is this:ajp_connect_to_endpoint::jk_ajp_common.c (1124): (WEB02LocalClusterInstance_x.x.x.x) Failed opening socket to (x.x.x.x:8012)The port number is correct for the WEB02 instance.  In the WEB02 instance's server.xml, the connector tag has the matching secret attribute, allowedRequestAttributesPattern=".*" and I've tried various values in the address attribute, with no success. Does anyone have any suggestions for how to troubleshoot or fix this connection issue? ThanksAndy

My company has been running one of its websites on Coldfusion9 for the past 10 years and our developer is no longer supporting us and we need help.  Our website is down as of yesterday and we have determined it is the site not the hardware.  How can we go about finding someone to assist.

For a DataSource on the Admin page that is a Microsoft SQL connection, I need to set the ApplicationIntent to ReadOnly. We are running on an old CF10 version (upgrade scheduled for later this year), so is the only way to do this is by entering the Connection String value in the DataSource advanced options?(and of course only selecting the Read tick boxes below it, turning off the update, insert, etc) (and if it is, any typical examples would be really useful).